This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
File: XnKqfVsdVjLl0z_scvp0M_Sc4po.mft (raw, json)
Hash identifier: /Ois7kdg+fi3aO86H6SJNRTR1yrQ9/u81V/xmDAnpQY=
Subject key identifier: 0C:34:B8:7E:6C:C1:60:B2:F4:A6:82:93:B6:EA:CB:27:5C:AF:36:FF
Authority key identifier: 5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
Certificate issuer: /CN=A91C9E82/serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
Certificate serial: 01F8
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
Manifest number: 01D2
Signing time: Sun 25 Jan 2026 02:28:59 +0000
Manifest this update: Sun 25 Jan 2026 02:28:59 +0000
Manifest next update: Sun 01 Feb 2026 02:28:59 +0000
Files and hashes: 1: XnKqfVsdVjLl0z_scvp0M_Sc4po.crl (hash: JUd+nHROOAGydW2IUKcFytSHDeSQtIL/8r0BHUznSi8=)
2: 9830B6D8663D11EE8CBBAE7CC4F9AE02.roa (hash: RmkIIPTPM365rnHi3iyE65DKC/DdOKV16KKoUBGaAYI=)
3: 00E626A4A57611EF98285E5FC4F9AE02.roa (hash: 08NPSGEr7+x4MzDThoj8ZzRXxZk450XlydgirrF3WE4=)
4: 99341DD6663D11EE8CBBAE7CC4F9AE02.roa (hash: Kt+JRZe4NSSBGcnDuKjJxIa0JojNpdBSE93Vqrzpq7E=)
5: 36C31E00637111EEA51CA05EC4F9AE02.roa (hash: lY96nEi5CKYTXJTj1z2X+4msAEH0lgBh87K7FsjTVZ8=)
6: 98BE8828663D11EE8CBBAE7CC4F9AE02.roa (hash: OnFM4tWhowHbvjU4usSptKOpZeLKLT7QxFEJy+UEpYk=)
7: 678C24C0663F11EEBD955D43C4F9AE02.roa (hash: Rlo1FH4ToBEybkPEC2r5mS4GIe86F2K5uAovVfJDrI8=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl
rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 01 Feb 2026 02:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 504 (0x1f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91C9E82, serialNumber=5E72AA7D5B1D5632E5D33FEC72FA7433F49CE29A
Validity
Not Before: Jan 25 02:28:59 2026 GMT
Not After : Feb 1 02:28:59 2026 GMT
Subject: CN=69757feb-c00b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1f:0b:82:ba:d8:df:ad:41:82:07:e2:85:ae:
04:6a:47:d8:c3:e4:08:c0:e1:45:4e:3e:fa:e2:f9:
39:ba:54:b6:77:56:3c:9d:a0:0f:35:13:fc:3f:37:
b8:69:c8:c5:38:ea:1a:44:54:82:89:58:43:d3:b4:
c9:d2:4b:88:f4:56:49:de:65:51:81:1c:d3:34:b7:
5f:23:f2:ff:5c:95:82:fb:98:46:e3:6c:18:db:1b:
4c:2e:70:17:79:53:6f:88:9d:54:2f:5d:89:05:15:
f3:0d:af:82:6e:92:53:65:a5:d6:65:2d:86:30:f7:
6c:f8:24:11:91:17:c5:76:9c:9a:0a:49:a8:1a:bc:
f9:61:49:d6:6c:f5:07:96:1a:27:f0:f4:de:c1:25:
4f:4c:02:bb:51:5c:52:89:3f:11:2d:d2:42:84:4b:
28:44:9c:98:4d:1f:a4:34:d0:72:40:15:97:8f:ba:
d8:7c:a0:2a:06:09:05:4a:74:b9:00:fc:c7:a6:62:
5a:ad:b9:db:38:0a:1c:91:41:5f:dd:99:32:69:36:
25:23:f3:cf:c3:5c:4c:0a:7d:f9:dc:f7:af:fb:15:
23:cc:fd:25:1b:aa:03:57:3a:1d:23:12:d1:72:0f:
bd:b3:6c:81:d0:10:e6:62:ac:41:ee:06:ff:75:a1:
d4:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:34:B8:7E:6C:C1:60:B2:F4:A6:82:93:B6:EA:CB:27:5C:AF:36:FF
X509v3 Authority Key Identifier:
keyid:5E:72:AA:7D:5B:1D:56:32:E5:D3:3F:EC:72:FA:74:33:F4:9C:E2:9A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XnKqfVsdVjLl0z_scvp0M_Sc4po.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9E82/EA7E5FA6636F11EE97C74B5CC4F9AE02/XnKqfVsdVjLl0z_scvp0M_Sc4po.mft
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
90:91:28:1b:75:6c:86:c7:39:92:ff:98:18:1a:bc:14:d7:b0:
45:91:d4:4c:64:b0:f2:b6:26:0e:1d:f6:a5:bd:89:f0:db:a3:
f7:d3:75:5d:e2:f4:d9:65:6f:97:ec:2e:c0:32:e4:f3:cd:ca:
ea:a9:6f:2f:5e:87:c2:67:58:8e:b0:51:0c:62:b6:04:28:9a:
0c:d2:5e:52:da:24:c9:61:b6:98:10:9e:8f:f7:03:14:c3:ed:
be:d5:95:b5:6f:7b:07:53:b3:f2:04:85:b6:38:b2:fe:e8:04:
0b:8e:94:84:93:60:2c:89:c6:5f:a1:ef:6a:67:e3:3b:08:f6:
e3:18:c6:1f:62:60:a6:ce:e5:4d:66:10:22:ff:09:3d:09:9b:
81:ec:a5:d8:f0:3a:68:1e:ad:a0:94:17:ad:ef:0b:ba:2b:56:
3c:a0:46:27:95:0e:cc:bd:16:4b:25:f7:96:e7:19:f1:d7:25:
18:82:9d:05:fc:b2:ea:28:cc:7b:28:f6:4c:37:88:47:8b:83:
c9:59:4c:d2:42:5d:68:0d:92:dd:1b:7f:77:c8:fd:47:90:7e:
ab:2a:8d:be:e2:b3:df:dc:27:a4:9e:57:12:7f:7e:d0:fd:60:
ff:3d:20:49:3d:08:b1:c1:3e:eb:1b:f9:7c:06:53:6b:c4:fd:
11:91:cb:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 25 08:18:03 2026 by rpki-client